@tinacms cli vulnerabilities
4 published CVEs name @tinacms cli among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-108259
Tina: Code injection via unescaped Git branch name in generated client source
tinacms · tinacms
High8.2 - CVE-2026-29066
Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI
@tinacms · cli
Medium6.2 - CVE-2026-28793
Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS
@tinacms · cli
High8.4 - CVE-2026-28792
Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS
@tinacms · cli
Critical9.7